@@ -9,7 +9,7 @@ defaults:
99
1010env :
1111 # renovate: datasource=pypi depName=zizmor
12- ZIZMOR_VERSION : 1.19 .0
12+ ZIZMOR_VERSION : 1.20 .0
1313
1414on :
1515 workflow_call :
8383 id : ml
8484 # You can override MegaLinter flavor used to have faster performances
8585 # More info at https://megalinter.io/latest/flavors/
86- uses : oxsecurity/megalinter@55a59b24a441e0e1943080d4a512d827710d4a9d # v9.2 .0
86+ uses : oxsecurity/megalinter@42bb470545e359597e7f12156947c436e4e3fb9a # v9.3 .0
8787 env :
8888 VALIDATE_ALL_CODEBASE : " true"
8989 # only try to post PR comments if it's not a fork
@@ -103,7 +103,7 @@ jobs:
103103
104104 - name : Upload MegaLinter scan results to GitHub Security tab
105105 if : ${{ always() }}
106- uses : github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
106+ uses : github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
107107 with :
108108 sarif_file : " megalinter-reports/megalinter-report.sarif"
109109
@@ -196,7 +196,7 @@ jobs:
196196
197197 # Initializes the CodeQL tools for scanning.
198198 - name : Initialize CodeQL
199- uses : github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
199+ uses : github/codeql-action/init@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
200200 with :
201201 languages : ${{ matrix.language }}
202202 # If you wish to specify custom queries, you can do so here or in a config file.
@@ -209,7 +209,7 @@ jobs:
209209 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
210210 # If this step fails, then you should remove it and run the build manually (see below)
211211 - name : Autobuild
212- uses : github/codeql-action/autobuild@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
212+ uses : github/codeql-action/autobuild@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
213213
214214 # ℹ️ Command-line programs to run using the OS shell.
215215 # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -222,7 +222,7 @@ jobs:
222222 # ./location_of_script_within_repo/buildscript.sh
223223
224224 - name : Perform CodeQL Analysis
225- uses : github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
225+ uses : github/codeql-action/analyze@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
226226 with :
227227 category : " /language:${{matrix.language}}"
228228
@@ -241,7 +241,7 @@ jobs:
241241 persist-credentials : false
242242
243243 - name : Install the latest version of uv
244- uses : astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v7.1.6
244+ uses : astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
245245 with :
246246 enable-cache : false
247247
@@ -264,7 +264,7 @@ jobs:
264264 ZIZMOR_CONFIG : /tmp/zizmor-standard-lint-defaults.yaml
265265
266266 - name : Upload SARIF file
267- uses : github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
267+ uses : github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
268268 with :
269269 sarif_file : results.sarif
270270 category : zizmor
0 commit comments